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Watermark-based access control method and device 


The invention relates to a method of controlling access to a resource such as a 
computer program or a multimedia object The invention further relates to a verifying device 
arranged for controlling access to a resource. 


Watermarking, the process of inserting extra information in a signal such as an 
audio or video signal, is an important and well-known technique to mark or protect those 
signals. A movie can be watermarked so its origin can be identified, or unauthorized copies 
can be distinguished from the original. Watermarks can be used with still images to locate 
copies reproduced by unauthorized third parties, by simply downloading images from the 
information services offered by those third parties and examining the downloaded images for 
the watermark. 

Watermarks can also be used to embed metadata, such as an Internet Uniform 
Resource Locator (URL), in the input signal, for instance in a movie. Upon receiving a signal 
with the embedded extra information, a device can decode the URL and fetch the associated 
resource for displaying it to the user. A user who views the movie at his personal 
entertainment station can thus access the embedded metadata to access, for instance, the 
World-Wide Web site of the movie. 

International patent application PCT/EP01/12712 (attorney docket 
PHNL000591) by the same applicant as the present application describes how a command 
can be transmitted to a controllable device by embedding it using watermarking techniques in 
a signal like a television program or a piece of music. A watermark detector in the 
controllable device picks up the signal, preferably through the acoustical domain, detects the 
watermarked command and executes it The controllable device is preferably embodied as a 
toy, which can then be controlled to "play along" with a children's television program. 

In another application of watermarking, rights regarding the copying and/or 
playback of a multimedia object like a movie or song are embedded in the multimedia object 
using watermarking technology. A playback or copying apparatus can then extract these 
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rights from the multimedia object and operate in accordance with the extracted rights, e.g. by 
refusing to copy the multimedia object if no copying rights are embedded in the object. 

However, mis application of watermarking suffers from the drawback that the 
rights embedded in the multimedia object cannot be easily modified. This makes it difficult 
to later provide additional rights, or to revoke previously granted rights for the multimedia 
object 


It is an object of the invention to provide a method according to the preamble, 
10 which provides a flexible way to authorize operations on the resource. 

This object is achieved according to the invention in a method comprising 
embedding an authorization code in a signal by means of a watermark and transmitting the 
watermarked sigual to a verifying device, and in the verifying device, extracting the 
authorization code from the watermarked signal and authorizing an operation to be performed 
15 on the resource in dependence on the extracted authorization code. 

By embedding the authorization code using watermarks in a signal, the 
authorization codes can be supplied to. the verifying device without the need for special 
communication channels between an entity supplying authorization and the verifying device, 
m effect, the normally available audio and/or video transmission channels are used to supply 
20 authorization codes to the verifying device. Further, new authorization codes, as well as 

revocations for previously supplied authorization codes, can easily be suppliedby embedding 
them in subsequent signals transmitted in the same way. 

The signal in which the authorization code is embedded does not represent the 
resource to which the authorization code applies. Rather, the signal is merely used as a carrier 
25 for getting the authorization code to the verifying device controlling access to the resource. 

In an embodiment the resource comprises a computer program and the 
authorization code causes the verifying device to grant permission for executing the program. 
Execution of programs can be controlled using so-called license managers. License managers 
are computer programs that control Ihe execution of other programs based on license codes. 
30 Ordinarily these license codes have to be purchased from a supplier and entered into the 
license manager software to enable execution of the programs under its control. In this 
embodiment the license code is supplied as an authorization code embedded in a signal, 
making it possible to automatically extract the license code and supply it to the license 
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manager. The license manager will then allow a user to execute the computer program based 

on the license code. 

In a further embodiment the resource comprises a computer program and the 
authorization code causes the verifying device to grant permission for activating a module of 
the computer program. One way to promote a computer program is to distribute a so-called 
"shareware" version, in which part of the functionality is disabled. This allows potential 
buyers of the program to try it out for free. As the disabled functions can be seen but not 
used, users of the shareware version are encouraged to buy the whole program. 

Typically buying the full version of a program is done by purchasing a license 
code that is to be entered in the shareware program. If the right code is entered, the disabled 
modules are enabled and the full functionality becomes available. This embodiment of the 
invention makes it possible to enable such a disabled module using a license code embedded 
in a signal such as a commercial promoting the computer program, or a television program 
reviewing the program. 

In a further embodiment the resource comprises an electronic game and the 
authorization code causes the verifying device to grant permission for activating a cheat 
function in the electronic game. A cheat code allows the player of an electronic game to 
access functionality of the game that would normally not be accessible. For example, the 
player's character could be invincible in the game for a certain time, receive extra points or 

weapons, and so on. 

Normally, such cheat codes are distributed as alphanumerical strings or 
sequences of buttons to be pressed ("press left4eft-up-right-escape to become invincible"). In 
this embodiment the authorization code provides a cheat code for use in the electronic game. 
This makes it much easier for the player to activate the cheat function. The authorization 
code could be embedded in a television program related to electronic games. This encourages 
players to watch the television program because they want to obtain the cheat codes. 

In a further embodiment the resource comprises a multimedia object and the 
authorization code causes the verifying device to grant permission for at least one of: a 
rendering of the multimedia object and the making of a copy of the multimedia object. 
Digital rights management (DRM) systems can be used to enforce restrictions on rendering 
and/or copying of multimedia objects. This forces people to obtain e< rights" or permissions 
for rendering and/or copying. The present invention makes it possible to grant these "rights" 
by embedding them in signals likely to be received by verifying devices coupled to DRM 
systems. 
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The signal could e.g. represent an advertisement related to the multimedia 
object. If, after hearing the advertisement a user receives a (preferably one-time) playback 
right for a multimedia obj ect, he will be greatly encouraged to also view future 
advertisements, and to buy the advertised product, which will typically be an item like a 
record carrier comprising the multimedia object or a concert by the artist performing the 
multimedia object. 

Preferably, in the above embodiments the permission is limited in time. This 
way, the effect of the permission can be limited to a certain time period. It also realizes a 
greater audience for entities transmitting the watermarked signals, such as television 
broadcasters, radio stations and so on, as people wishing to make use of the authorization 
codes now must obtain these codes before the limited time expires. 

In a further embodiment the resource comprises a computer program and the 
authorization code causes the verifying device to revoke a previously granted permission for 
executing the program. This makes it possible to distribute programs that are only supposed 
to be executed for a limited time, such as beta or test versions of a program 

In a variant of this embodiment the authorization code further causes tiie 
verifying device to authorize a further operation to be performed on the resource. It is to be 
expected .that users will try to avoid receiving authorization codes that revoke previously 
granted permissions. One way to overcome this problem is to provide a positive authorization 

together with the revocation 

For example, if the authorization code revokes permission to execute a beta 
version of a computer program, it could at the same time grant permission to execute the 
official release version of that computer program This way a beta tester is encouraged to 
allow revocation of the beta version Preferably this further authorization is delayed until a 
predetermined time has elapsed after the revocation took place. 

In a further embodiment the signal comprises an advertisement related to the 
resource. This has the advantage that a person listening to or viewing the signal can easily 
associate any authorizations granted by the embedded authorization codes with resources to 
which the authorizations apply. Further, it encourages the viewing or listening to 
advertisements. 

It is a further object of the invention to provide a verifying device according to 
the preamble, which is capable of handling authorizations in a flexible matter. 

This object is achieved according to the invention in a verifying device 
comprising receiving means for receiving a watermarked signal, watermark detection means 
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for detecting an authorization code embedded in the watermarked signal, and access control 
means for autho rizing an operation to be performed on the resource in dependence on the 
extracted authorization code. 

A very flexible channel is obtained by transporting the authorization code to 
the verifying device embedded in a watermark in a signal. If new, updated or otherwise 
modified authorization codes need to be supplied, or previously granted permissions need to 
be revoked, they can simply be embedded in a new signal transmitted to the verifying device. 
The verifying device does not need to have a special connection to any entity supplying 
authorization codes. It could simply tune in to broadcasted radio or TV signals, or detect 
watermarks in audio signals picked up using a microphone, and so on. 

Thus, in terms of technical effects produced by the invention, the verifying 
device no longer needs a separate channel for receiving authorizations, can handle 
authorizations varying in time for one particular multimedia object without having to update 
the multimedia object, andean activate, modify or deactivate functionality in a resource like 
a computer. 

In an embodiment the authorization code comprises a timestamp and the 
access control means are arranged for authorizing the operation further in dependence on a 
comparison of the timestamp against a current time. This way the access control means can 
determine the validity of the extracted authorization code. The access control means can then 
ignore authorization codes extracted after the end of a validity period indicated by the 
timestamp, and/or automatically revoke authorizations granted once the validity indicated by 
the timestamp expires. 

The invention further relates to a computer program product arranged for 
causing a general purpose computer to function as the verifying device of the invention.The 
invention further relates to a signal in which an authorization code is embedded by means of 
a watermark. Preferably the computer program product and/or the signal are embodied on a 
carrier such as a compact disc, a Digital Versatile Disc, a video tape or a floppy disc. 

These and other aspects of the invention will be apparent from and elucidated 
with reference to the embodiments shown in the drawing, in which: 

Fig. 1 schematically shows a system comprising a transmitter and a verifying 
device in accordance with the invention; 
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Fig. 2 schematically illustrates various applications of the method according to 


the invention. 


20 


Throughout the figures, same reference numerals indicate similar or 

correspondingfea^^^ _ 

i^iementenmso^ 

orobjects. 

110, a rendering device 114, a network 119 and a verifying device 130 configured to control 

access to a resource 140. 

A receiving module 111 in the watermarking device 110 recerves eContent 

U^whichisforinstanceatelevirionpm^^ 

or commercial, a pictin. or a sound or a portion thereof. It is usually « 

a television broadcasting organization. Alternatively, i, can be loaded ^ "~ 
-which can be a tape or a disk such as aDVD or Video CD. It can also be abard diskon 
which it has been previously recorded for later viewing. 

In accordance with me invention, an authorizing module 112 determines an 

al a hori zationc«>ematis to ^ 

be obtained from an external source, be read from local sterage 118 or be mpn, by an 
operator of me watermarking device 110. A more deteiled description of possrble 
au.horization codes and the* uses canbe^ 

An embedding module 1 13 embeds the authorization code m me content .tern, 

p^ucurg watermarked rignamo.usmgany^^ 

Lhnioue appropriate for me content 1,6. The watermarked signal 120 is men fed te 
rendelg device 114 over a transmission mrfium 119, which can he e.g. a network such as 
the Internet, a satellite feed or a cable television network. 

The rendering device 114 outputs the received signal 120 usmg andro output 
m odul= 115 and/or video outputmodnle 116. If the signal 120 comprises audio and vrdeo 
siguaKrespectiveontpufcrnay be synchro 

watermarkedsigual 120 is an audio signal, bu.it cune,uaUyweUbeav.deo,gnalBy 
re ^*ow rt «m^s i g n a l 120mmia & shion > me verifying devlco 30 ts *leti. 
recrive it Alternatively, me watennarked signal 120 could be tiananitted dnectly to the 
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verifying device 130, for example using a network connection between the watermarking 
device 110 and the verifying device 130. 

The verifying device 130 comprises receiving module 131, decoding module 
132 and access control module 133. The receiving module 131 receives the watermarked 
audio signal 120 and feeds it to the decoding module 132. The receiving module 131 can be 
for instance a microphone, a camera or a light sensitive sensor of some kind. 

The decoding module 132 processes the watermarked audio signal 120 to 
obtain the authorization code embedded therein. Detecting a watermark and extracting 
embedded information is well known in the art and will not be elaborated upon further. The 
authorization code is then fed to the access control module 133. 

The access control module 133 is arranged to control access to a resource 140, 
which in the embodiment of Fig. 1 comprises a computer program running on a personal 
computer. In the context of computer programs, controlling access refers to things like 
granting permission for execution of the program, revoking a previously granted permission 
for execution of the program, granting permission for activation of a module of the program 
and so on. A user of the personal computer will be unable to execute the program or activate 
the module unless permission has been granted by the access control module 133. Ways for 
controlling access are discussed more extensively with reference to Fig. 2 below. 

In accordance with the invention, the access control module 133 controls 
access to the resource 140 in dependence on the authorization code extracted from the 
watermarked signal 120 by the decoding module 132. This way, it is possible to grant or 
revoke permissions, or to otherwise control access to the resource 140, in a very flexible way 
by simply transmitting a new watermarked signal with an authorization code every time a 
new permission is to be granted or revoked. 

The watermarking device 110 can be realized as a computer program product 
being arranged for causing a processor to execute the steps described above. The computer 
program product enables a programmable device when executing said computer program 
product to function as the watermarking device 1 10. Similarly, the verifying device 130 can 
be realized as a computer program product enabling a programmable device when executing 
said computer program product to function as the verifying device 130. 

The above description gives a general overview of the functionality of 
distributing watermarked content. Various ways are possible to realize the watermarking 
device 1 10 and the verifying device 130, with different advantages and possibilities. 

Fig. 2 schematically illustrates various applications of the method according to 
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the invention, The verifying device 130 is inFig^ope^lycotmectedtoacox^pla^ack 
apparatus 210, a gaming device 220, a personal computer 230, and a cash register 240 . Usmg 
this connection, the verifying device 1 30 can control access to and/or operations of the 
devices 210, 220, 230, 240. Of course the verifying device 130 could also be connected to a 
great variety of other devices, such as telephone booths, vending machines, Internet access 
terminals or toys. 

The connection between the verifying device 130 and (he devices 210, 220, 
230 240 canbe wired orwireless, depending on what kind of device verifying device 130 .s 
connected to. In Fig, 2, the connection win, the gaming device 220 and the ensh register 240 
is wireless, and me connection with the devices 210 and 230 is wire* The verifying devxe. 
130 can also be embodied as a component installed inside the devices 210, 220, 230, 240. 

When an authorization code is extracted from the watermarked signal 120, me 
access control modnle 133 checks whether tire authorization code is applicable for any of the 
resources to which is connected: If this is not the case, the authorization code is .gnored 

Otorwise me access control module 133 performs an action appropriate for the authonzahon 

code and me resourcetowmch me code apphes. This ^ 

exemplary, non-limiting embodiments. 

In a first example, the resource comprises a computer program 231 to be 
executed on me persomti computer 230. The verifying device 130 is now preferably realized 
asacomputerpmgmmnmmngonthepersonalcomp^^^ 

realized as one or more hardware modules installed in the personal computer 230, or as a 
separate device like in Fig. 2. Embodying me verifying device 130 as a part of the personal 
computer 230 has the advantage that components tikethe microphone 131 canbe omrtted, as 
Ihey are usually present in the personal computer 230 already. 

The authorization code now represents a license code granting pemnssion for 
executing the computer program 23 1 . By itself it is known in the field of computer software 
ttat execution of programs can be continued using so-called license managers, Ltcense 
.nanagers are computer programs that control me execution of other programs based on 
license codes. These known techniques can be adapted to work with the invention by 
, supplying the amhorization code to the license manager, which will subsequently allow a 
nsertoexecutemeconmmerprogram231 based on the authorization code. 

In arelated embodiment, the computer program 231 is a so-called "shareware 
application, in which certain modules providing certain functionality are disabled until the 
user supplies an aumorization code. Usually the authorization code is supplied by the creator 
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of the program after the user makes a payment. In accordance with the invention, the 
authorization code is embedded in the watermarked signal 120, which preferably is a 
commercial for the computer program 23 1 . 

Another example involves the gaming device 220. This device 220 could be a 
hand-held gaming console, an arcade game machine or a computer program running on a 
general purpose or specially adapted computer. Of course the gaming device 220 usually 
operates essentially in the same way as the personal computer 230, so the license codes could 
also be supplied to the gaining device 220 to enable execution of particular games, or to 
allow access to certain parts of a game (which are modules of the game software). For 
example, extra 'levels" in the game could be made available. 

Many electronic games have so-called "cheat functions". Using these functions 
a player could for example easily get extra weapons or other objects for use in the game, earn 
extra points, walk through walls, get access to a map of the entire gaining environment, and 
so on. Typically the code necessary to activate a cheat function is supplied by pressing a 
specific sequence on a keyboard and/or operating a joystick in a particular way. La 
accordance with the invention, this code is supplied by the verifying device 130. 

One particularly useful extension of this example involves television programs 
that discuss and/or review electronic games. A popular feature in such programs is providing 
cheat codes. In prior art systems this is done by verbally or graphically listing the keyboard 
sequences necessary to activate the cheat function. However, the invention makes it possible 
to embed the cheat code in the television program at the appropriate moment, so that the 
verifying device 130 can pick up the signal, extract the cheat code and supply the extracted 
code to the gaming device 220. 

If the verifying device 130 is embodied as a part of the gaming device 220, 
then a player wishing to obtain a cheat code merely needs to watch the television program 
and use his gaming device 220 to pick up the signal when the cheat codes are being supplied. 
The gaming device 220 will then automatically detect the cheat codes. 

Another useful application of the method according to the invention allows 
controlling access to copy protected multimedia objects like music, movies and so on. A 
digital rights management (DRM) system installed in the content playback apparatus 210 
enforces restrictions on copying and/or playback of multimedia objects 212 e.g. stored in 
storage medium 21 1. These restrictions can be provided by embedding them in the 
multimedia objects using watermarking technology. For example, a multimedia object 213 
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could be made available for free on a web site, with the restriction that it can only be played 
back during the next week embedded in the object 213. 

If a user attempts to play back that multimedia object 213 after that time 
period, the DRM system prohibits this. From that moment on the user must obtain 

5 authorization for playback in some other fashion, usually by buying a playback right from the 
copyright holder. In accordance with the invention, the authorization code comprises such a 
playback right For example, if a radio station to which the user is listening broadcasts a 
specimen of the multimedia object 213, a one-time playback right could be embedded in the 
broadcast signal. The verifying device 130 picks up the one-time playback right and supplies 

10 it to the DRM system, so that the user gets an opportunity to play back the multimedia object 
213 once. 

This approach can, next to playback rights, also be used for copying rights. 
This allows the user to make a copy of a multimedia object when a signal comprising the 
appropriate authentication code is broadcast or transmitted to him otherwise. 

15 Preferably the signal comprises an advertisement related to the multimedia 

object. For example, a record label might release a compact disc with a number of songs by 
one particular artist or group. To promote this release, advertisements are transmitted over 
radio and TV channels. The potential audience for this release most likely already has several 
multimedia objects comprising particular songs in its possession. By granting a one time 

20 playback right embedded in the advertisement, the record label encourages its potential 

audience to listen to its advertisements and whets the appetite for the compact disc because 
the audience will use the playback right to listen to the particular songs in its possession, and 
so become excited about the artist 

The verifying device 130 can also be connected to the cash register 240. The 

25 authorization code in that case preferably grants permission to the cash register 240 for 
applying a discount to a purchase being effected using hie cash register 240. Using this 
embodiment an advertiser could easily offer discounts on bis products by embedding 
discount codes into the watermarked signal 120. Consumers can pick up the watermarked 
signal 120 using the verifying device 130 and supply the extracted authorization code at a 

30 store to a sales clerk operating the cash register 240. The clerk subsequently enters the 

authorization code into the cash register 240, so that the discount is applied to the price of the 
product. 

In this embodiment it may be advantageous to fit the verifying device 130 with 
the display on which the access control module 133 can display the authorization code. 


o 


WO 03/065723 PCT/IB03/00214 

11 

Alternatively, using a wired or wireless connection (for example using Bluetooth) the access 
control module 133 could feed the authorization code directly to the cash register 240. 

Preferably the permission is limited in time. This can be realized by adding a 
» timestamp to the authorization code. A timestamp usually indicates the time at which the 

5 permission becomes valid, and/or the time at which the permission ceases to be valid 

Alternatively, the timestamp could comprises a time period during which the permission is 
valid. 

If the access control module 133 detects that a timestamp was added to the 
authorization code, it compares the timestamp against the current time as measured in the 
10 verifying device 130. This may require the installation of a real-time clock in the verifying 
device 130. If the current time exceeds the latest time at which the permission is valid 
according to the timestamp, the authorization code is rejected as invalid because it has 
expired. 

The authorization code alternatively comprises an indication that a previously 

15 granted permission is to be revoked. The access control module 133 then revokes this 
permission. In the example involving computer program 23 1, this could be realized by 
signaling to the license manager that the license code for the computer program 231 is to be 
deleted, revoked or disabled. 

Access control module 133 could also keep track of the time at which an 

20 authorization code was received, and automatically revoke a permission granted by an 

authorization code if the current time exceeds a certain amount of time after the time at which 
the code was received. If the authorization code comprises a timestamp indicating the end of 
the validity period, the access control module 133 automatically revokes the permission when 
the time indicated in the timestamp is reached 

25 It is to be expected that users will try to avoid receiving authorization codes 

that revoke previously granted permissions. One way to overcome this problem is to provide 
a positive authorization together with the revocation. For example, if the authorization code 
revokes permission to execute a beta or test version of a computer program, it could at the 
r same time grant permission to execute the official release version of that computer program. 

30 This way a beta tester is encouraged to allow revocation of the beta version. Preferably this 
further authorization is delayed until a predetermined time has elapsed after the revocation 
took place. 

It should be noted that the above-mentioned embodiments illustrate rather than 
limit the invention, and that those skilled in the art will be able to design many alternative 


PCT71B03/00214 

WO 03/065723 

12 

embodiments without departing from the scope of the appended claims. For example, 
multiple authorization codes could be embedded in one or multiple watermarks in the signal. 
Next to an authorization code embedded in a signal using a watermark, additional codes 
could be provided in other channels, such as by using audible signals, by providing Ihem in a 
Teletext channel, or visually showing them in a video signal or in an image. Different 
verifying devices could authorize different operations based on one authorization code in one 

signal received by both. 

Rather than, or in addition to, being limited in time, the authorization can also 
be limited in space. This can be realized by e.g. adding an address on a computer network 
10 (like an IP address or hostname) to the authorization code, or by including Global Positioning 
System coordinates in the authorization code. The authorization code can also contain one or 
more other properties of the verifying device 130 to limit the scope of the authorization. 

If the authorizations are limited in time, it becomes possible to require owners 
of the device 140 to periodically expose themselves to content with new authorizations. For 
1 5 instance, a toy could be given away for free with an initial authorization in place that is 
limited in time (say, a week). After that, the owner of the toy must periodically visit a 
location in which the device 114 is installed, preferably a fast food restaurant or toy store.' 
The signal 120 produced by the device 114 grants the toy a new time-limited authorization so 
it operates for another week. If the owner does not visit the location every week, the toy 
20 ceases functioning or limits its abilities. 

In the claims, any reference signs placed between parentheses shall not be 
construed as limiting the claim. The word "comprising" does not exclude the presence of 
elements or steps other than those listed in a claim. The word "a" or "an" preceding an 
element does not exclude the presence of a plurality of such elements. 
25 The invention can be implemented by means of hardware comprising several 

distinct elements, and by means of a suitably programmed computer. In the device claim 
enumerating several means, several of these means can be embodied by one and the same 
item of hardware. The mere fact that certain measures are recited in mutually different 
dependent claims does not indicate that a combination of these measures cannot be used to 
30 advantage. 
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1 . A method of controlling access to a resource (140), comprising embedding an 
authorization code in a signal (120) by means of a watermark and transmitting the 
watermarked signal (120) to a verifying device (130), and in the verifying device (130), 
extracting the authorization code from the watermarked signal (120) and authorizing an 
operation to be performed on the resource (140) in dependence on the extracted authorization 
code. 

2. The method of claim 1, in which the resource (140) comprises a computer 
program and the authorization code causes the verifying device (130) to grant permission for 
executing the program. 

3. The method of claim 1, in which the resource (140) comprises a computer 
program and the authorization code causes the verifying device (130) to grant permission for 
activating a module of the computer program. 

4. The method of claim 1, in which the resource (140) comprises an electronic 
game and the authorization code causes the verifying device (130) to grant permission for 
activating a cheat function in the electronic game. 

5. The method of claim 1, in which the resource (140) comprises a multimedia 
object and the authorization code causes the verifying device (130) to grant permission for at 
least one of: a rendering of the multimedia object and the making of a copy of the multimedia 
object. 

6. The method of claims 2, 3, 4 or 5, in which the permission is limited in time. 

7. The method of claim 1, in which the resource (140) comprises a computer 
program and the authorization code causes the verifying device (130) to revoke a previously 
granted permission for executing the program. 
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8. The method of claim 7, in which the authorization code further causes the 
verifying device (130) to authorize a further operation to be performed on the resource. 

9. The method of claim 1, in which the signal (120) comprises an advertisement 
related to the resource (140). 

10. A verifying device (130) arranged for controlling access to a resource (140), 
comprising receiving means (131) for receiving a watermarked signal (120), watermark 
detection means (132) for detecting an authorization code embedded in the watermarked 
signal (120), and access control means (133) for authorizing an operation to be performed on 
the resource (140) in dependence on the extracted authorization code. 

11. The verifying device (130) of claim 10, in which the authorization code 
comprises a timestamp and the access control means (133) are arranged for authorizing the 
operation further in dependence on a comparison of the timestamp against a current time. 

12. A computer program product arranged for causing a general purpose computer 
to function as the verifying device (130) of claim 9. 

13. A signal (120) in which an authorization code is embedded by means of a 
watermark. 




